Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a2f68873-40b0-33d5-88be-59ba2428fb77.roa
File:                     a2f68873-40b0-33d5-88be-59ba2428fb77.roa (raw, json)
Hash identifier:          kp1XTtq5Sc1AE8y8S5XxJSD3YdQA2tWZPA9z1sY4Ckc=
Subject key identifier:   BD:36:7A:42:05:81:EF:A8:67:92:77:F2:D0:B5:D1:BD:F3:6D:88:F6
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584DC4004F5D7D899686B8F059E0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a2f68873-40b0-33d5-88be-59ba2428fb77.roa
Signing time:             Fri 08 May 2026 13:00:30 +0000
ROA not before:           Fri 08 May 2026 13:00:30 +0000
ROA not after:            Thu 06 Aug 2026 13:00:30 +0000
asID:                     577
IP address blocks:        156.34.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:00:4f:5d:7d:89:96:86:b8:f0:59:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May  8 13:00:30 2026 GMT
            Not After : Aug  6 13:00:30 2026 GMT
        Subject: CN=c6da0069-f325-43cb-959e-d15a5306142c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a8:57:bb:27:75:1d:a6:45:11:a3:7d:a6:dc:
                    ab:2f:a4:3e:b8:d2:b3:24:44:52:47:8a:2c:57:60:
                    c5:8e:d9:c8:2a:b6:f7:29:c0:41:71:f9:01:b9:12:
                    0b:cc:89:78:bd:fd:33:a9:c4:58:ba:8b:69:5a:7d:
                    f6:15:50:27:66:d6:92:f4:1c:85:c2:d4:ae:2d:5a:
                    2d:b7:29:70:38:cc:1f:68:aa:e7:b4:c2:22:00:29:
                    34:6a:a2:36:99:7d:a0:e3:8d:10:3e:8a:77:2f:bf:
                    ca:ca:69:5c:fd:57:13:30:f4:b9:fe:f8:36:85:a7:
                    3c:04:57:40:51:ce:61:74:e5:ee:43:ba:80:a2:04:
                    3f:81:d5:3d:c5:e8:8b:63:46:33:0b:e7:af:2d:43:
                    33:53:51:82:95:69:d0:58:0e:28:dd:29:75:06:2e:
                    1f:8d:74:f5:da:f9:65:8e:b5:ff:21:62:95:9f:99:
                    5c:0c:8e:eb:36:60:f6:4b:ee:ad:ab:9f:a7:08:dd:
                    f1:40:cb:d3:46:ca:8d:73:06:55:57:16:e9:ee:4d:
                    eb:12:80:29:fb:b1:44:25:da:3e:c2:7b:69:03:b4:
                    85:35:42:84:da:57:fb:e7:ba:6f:62:37:73:0f:0b:
                    6c:45:0a:57:e4:fb:23:cf:0b:53:16:0f:bb:38:6e:
                    6d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:36:7A:42:05:81:EF:A8:67:92:77:F2:D0:B5:D1:BD:F3:6D:88:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a2f68873-40b0-33d5-88be-59ba2428fb77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.34.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:fb:41:4a:d5:f6:96:53:6d:d9:31:ed:b9:27:a3:a3:63:c5:
         3b:a2:8c:55:e5:e5:cc:60:6a:dc:0a:b3:ee:fe:21:e3:b6:1d:
         b9:d4:f1:ff:6e:29:e4:8d:48:50:c7:3f:e4:96:69:b3:39:6a:
         b4:aa:42:6f:48:8c:b0:4b:15:97:e0:eb:eb:13:b8:47:99:ca:
         4d:d6:4d:3c:58:45:f9:97:55:b5:a3:cd:0f:45:1e:ce:7a:a0:
         dd:6a:a4:cb:68:ce:6b:af:38:31:f5:1b:97:6c:8e:b6:00:2c:
         97:6e:1b:6f:3a:d1:4c:20:0a:1a:f9:64:ca:46:fb:f5:92:e1:
         8b:83:d3:2a:19:17:12:02:85:ba:e4:ac:6e:62:2b:d9:4f:46:
         35:9f:1d:03:4d:35:5e:7c:36:ff:48:a7:bc:ee:13:6f:f7:fd:
         55:18:34:c8:49:66:32:75:cf:6b:96:ee:dc:26:cf:4a:43:f8:
         d3:52:6a:21:9c:43:5e:48:b9:81:e2:64:ae:0a:18:8f:6c:6c:
         08:a4:35:c5:df:60:04:1d:f2:57:41:54:bd:6f:f1:38:d9:ef:
         fc:51:87:d5:f7:c0:4e:a0:07:b1:6a:9b:3b:41:3f:92:7e:2f:
         7a:c4:ec:6d:a8:05:1b:d8:e8:29:bb:cf:0f:76:b4:98:c4:57:
         bd:34:19:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:59:32 2026 by rpki-client